Privacy Policy
This Privacy Policy explains how Tenuta Blueberry processes personal data relating to users who visit this website or choose to contact us.
Data Controller
The Data Controller is TENUTA BLUEBERRY S.A.S. DI CACCIA CHIARA & C. SOCIETÀ AGRICOLA, with registered office at Via Comunale 20F, 28040 Varallo Pombia (NO), VAT/Fiscal Code 02830970030. For any request concerning the processing of personal data, you can contact us at tenutablueberry@gmail.com or at the PEC address tenuta.blueberry@pec.it.
Personal Data We Process
Data Voluntarily Provided
When you choose to contact us by email, we may process the personal data contained in your communication and any information you voluntarily provide.
- Name and surname, if provided
- Email address
- Telephone number, if provided
- Content of the communication
- Any additional personal information voluntarily included in the message
Technical Navigation Data
During the normal operation of the website, the IT systems and software procedures used to operate the website may collect certain technical data whose transmission is implicit in the use of Internet communication protocols.
- IP address
- Browser and device information (User Agent)
- Date and time of the request
- Requested resource or page
- HTTP response status code
This data is processed primarily for technical and security purposes and is not used to create user profiles.
Purposes of Processing
Handling of Requests
To respond to requests and communications voluntarily sent by users by email and to provide information about Tenuta Blueberry's services and activities.
Website Operation
To ensure the correct operation, availability and security of the website.
Security
To prevent, detect and manage unauthorized access, abuse, attempted attacks and other activities that may compromise the security of the website or its users.
Compliance with Legal Obligations
To comply with applicable legal obligations and protect the rights of the Data Controller.
Legal Bases for Processing
Personal data is processed on the basis of the following legal grounds provided for by Article 6 of the GDPR, according to the specific purpose of the processing.
- User requests: where applicable, processing is necessary to take steps at the request of the data subject prior to entering into a contract or to handle a request made by the user. For communications that do not fall within this scope, processing is carried out on the legal basis applicable to the specific request.
- Website security: the processing of technical data necessary to ensure the security and proper operation of the website is based on the legitimate interest of the Data Controller in protecting its infrastructure and services.
- Legal obligations: where necessary, processing is carried out to comply with a legal obligation to which the Data Controller is subject.
Data Retention
Personal data is retained for no longer than necessary for the purposes for which it was collected, taking into account applicable legal obligations and the need to protect the rights of the Data Controller.
Communications
Communications received by email are retained for as long as necessary to handle the request and, where applicable, manage the relationship with the data subject, as well as for any period necessary to protect the rights of the Data Controller or comply with legal obligations.
Technical Data and Logs
Technical data and any system logs are retained for the period determined by the infrastructure configuration and, in any event, only for as long as necessary for the technical and security purposes for which they are processed.
End of the Retention Period
At the end of the applicable retention period, the data is deleted or anonymized, unless further retention is required or permitted by law.
Recipients of Personal Data
Personal data may be processed by providers of technical services necessary for the operation of the website, IT infrastructure and communication services used by Tenuta Blueberry. Such providers process data only for purposes related to the services they provide and, where required by applicable law, act as data processors.
External Services and Links
The website does not embed third-party services intended to track or profile users. Some pages may contain links to external services, which are accessed only when the user voluntarily chooses to follow them.
These services are accessed outside the Tenuta Blueberry website. Once the user accesses an external service, the processing of personal data is governed by the privacy policy of the relevant service provider.
- Google Maps, available through an external link to allow users to view the location of the Tenuta.
- WhatsApp, available through an external link to allow users to contact Tenuta Blueberry.
- Email services, used when the user voluntarily chooses to send a message through their email application or provider.
Transfers to Third Countries
The website does not independently transfer personal data to third countries through tracking tools or embedded services. Any transfers associated with external services or providers used by the Data Controller are governed by the conditions and safeguards provided by those providers and by applicable law.
Your Rights
As a data subject, you may exercise the rights provided for by Articles 15-22 of the GDPR, subject to the conditions and limitations established by applicable law.
Right of Access
You may request confirmation as to whether your personal data is being processed and obtain a copy of the data being processed.
Right to Rectification
You may request the correction of inaccurate personal data or the completion of incomplete data.
Right to Erasure
You may request the deletion of your personal data in the cases provided for by applicable law.
Right to Restriction of Processing
You may request restriction of processing in the cases provided for by the GDPR.
Right to Data Portability
In the cases provided for by the GDPR, you may receive the personal data you have provided to us in a structured, commonly used and machine-readable format.
Right to Object
You may object to the processing of your personal data in the cases provided for by Article 21 of the GDPR.
How to Exercise Your Rights
To exercise your rights or request information about the processing of your personal data, you can send a request to:
Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.
In Italy, the competent supervisory authority is the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Last updated